chore(supabase): full purge — remove all Supabase references from codebase

- Delete supabase/ directory (config.toml, push-migrations.js,
  ADMIN_CREATE_STOP_FIX.sql, 137 archived migration files)
- Remove @supabase/ssr and @supabase/supabase-js from package.json
- Strip *.supabase.co from next.config.ts image hostnames
- Strip https://*.supabase.co from vercel.json CSP connect-src
- Remove 'supabase/**' ignore from eslint.config.mjs
- Clean supabase references from src/lib/db.ts, vitest.config.ts,
  db/seeds/2026-tuxedo-tour-stops.sql, src/actions/storefront.ts,
  scripts/import-tuxedo-stops.ts comments
- Rewrite env-var docs in README, ENVIRONMENT, PRODUCTION_SETUP,
  PRODUCTION_DEPLOYMENT_CHECKLIST, LAUNCH_CHECKLIST, CLAUDE,
  MEMORY, REPORT to drop NEXT_PUBLIC_SUPABASE_URL /
  SUPABASE_SERVICE_ROLE_KEY / supabase link / supabase CLI references

The canonical migration runner is now scripts/migrate.js (uses pg
directly via DATABASE_URL). Migrations live in db/migrations/. The
Supabase CLI is no longer in the codebase. The only remaining
'@supabase/*' in the dep tree is @supabase/auth-js as a transitive
of @neondatabase/auth (Neon Auth / Better Auth).

Final source scan: grep -rln '@supabase\|rest/v1\|supabase\.co'
src/ tests/ db/ scripts/ next.config.ts vercel.json eslint.config.mjs
package.json returns zero. Verification: npm install clean
(11 added, 21 removed, 12 changed), tsc shows same 17 pre-existing
errors (Stripe dahlia API version + fetch preconnect mocks),
vitest 172/175 (3 pre-existing failures in getAdminUser.test.ts),
lint shows same 14 pre-existing errors. Live-tested: dev server
boots in 248ms, public storefronts (/) (/login) (/pricing) (/tuxedo)
(/indian-river-direct) all return 200; /admin/v2?demo=1 reaches 200
after dev_session redirect; storefront renders real brand content.

supabase/migrations/.archived/139_time_tracking_missing_rpcs.sql

@@ -1,115 +0,0 @@
--- Update time log RPC
-CREATE OR REPLACE FUNCTION update_worker_time_log(
-  p_log_id uuid,
-  p_task_name text,
-  p_clock_in timestamptz,
-  p_clock_out timestamptz DEFAULT NULL,
-  p_lunch_minutes integer DEFAULT 0,
-  p_notes text DEFAULT NULL
-) RETURNS json
-LANGUAGE plpgsql
-SECURITY DEFINER
-AS $$
-DECLARE
-  v_task_id uuid;
-BEGIN
-  SELECT id INTO v_task_id FROM time_tracking_tasks WHERE name = p_task_name LIMIT 1;
-
-  UPDATE time_tracking_logs
-  SET task_id = v_task_id,
-      clock_in = p_clock_in,
-      clock_out = p_clock_out,
-      lunch_break_minutes = p_lunch_minutes,
-      notes = p_notes
-  WHERE id = p_log_id;
-
-  RETURN json_build_object('success', true);
-END;
-$$;
-
--- Delete time log RPC
-CREATE OR REPLACE FUNCTION delete_worker_time_log(p_log_id uuid)
-RETURNS json
-LANGUAGE plpgsql
-SECURITY DEFINER
-AS $$
-BEGIN
-  DELETE FROM time_tracking_logs WHERE id = p_log_id;
-  RETURN json_build_object('success', true);
-END;
-$$;
-
--- Get time tracking summary RPC
-CREATE OR REPLACE FUNCTION get_time_tracking_summary(
-  p_brand_id uuid,
-  p_start timestamptz,
-  p_end timestamptz
-) RETURNS json
-LANGUAGE plpgsql
-SECURITY DEFINER
-AS $$
-BEGIN
-  RETURN (
-    WITH worker_stats AS (
-      SELECT
-        l.worker_id,
-        w.name AS worker_name,
-        COUNT(*) AS entry_count,
-        SUM(
-          CASE
-            WHEN l.clock_out IS NOT NULL THEN
-              (EXTRACT(EPOCH FROM (l.clock_out - l.clock_in))::integer / 60) - l.lunch_break_minutes
-            ELSE 0
-          END
-        ) AS total_minutes
-      FROM time_tracking_logs l
-      JOIN time_tracking_workers w ON w.id = l.worker_id
-      WHERE l.brand_id = p_brand_id
-        AND l.clock_in >= p_start
-        AND l.clock_in <= p_end
-      GROUP BY l.worker_id, w.name
-    ),
-    task_stats AS (
-      SELECT
-        l.task_id,
-        t.name AS task_name,
-        t.name_es AS task_name_es,
-        COUNT(*) AS entry_count,
-        SUM(
-          CASE
-            WHEN l.clock_out IS NOT NULL THEN
-              (EXTRACT(EPOCH FROM (l.clock_out - l.clock_in))::integer / 60) - l.lunch_break_minutes
-            ELSE 0
-          END
-        ) AS total_minutes
-      FROM time_tracking_logs l
-      LEFT JOIN time_tracking_tasks t ON t.id = l.task_id
-      WHERE l.brand_id = p_brand_id
-        AND l.clock_in >= p_start
-        AND l.clock_in <= p_end
-      GROUP BY l.task_id, t.name, t.name_es
-    ),
-    totals AS (
-      SELECT
-        COUNT(*) AS entry_count,
-        COALESCE(SUM(
-          CASE
-            WHEN l.clock_out IS NOT NULL THEN
-              (EXTRACT(EPOCH FROM (l.clock_out - l.clock_in))::integer / 60) - l.lunch_break_minutes
-            ELSE 0
-          END
-        ), 0) AS total_minutes,
-        COUNT(*) FILTER (WHERE l.clock_out IS NULL) AS open_count
-      FROM time_tracking_logs l
-      WHERE l.brand_id = p_brand_id
-        AND l.clock_in >= p_start
-        AND l.clock_in <= p_end
-    )
-    SELECT json_build_object(
-      'by_worker', (SELECT json_agg(json_build_object('id', worker_id, 'name', worker_name, 'entry_count', entry_count, 'total_hours', ROUND(total_minutes::numeric / 60, 2))) FROM worker_stats),
-      'by_task', (SELECT json_agg(json_build_object('id', task_id, 'name', task_name, 'name_es', task_name_es, 'entry_count', entry_count, 'total_hours', ROUND(total_minutes::numeric / 60, 2))) FROM task_stats),
-      'totals', (SELECT json_build_object('entry_count', entry_count, 'total_hours', ROUND(total_minutes::numeric / 60, 2), 'open_count', open_count) FROM totals)
-    )
-  );
-END;
-$$;